Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bC_mZHSzj5R0OchwmHxTCc1hj08.roa
File: bC_mZHSzj5R0OchwmHxTCc1hj08.roa (raw, json)
Hash identifier: Kog0rJDCWnXjPsWsR8sLuAFMsXgN9vcKJx80Dl1AO+A=
Subject key identifier: 6C:2F:E6:64:74:B3:8F:94:74:39:C8:70:98:7C:53:09:CD:61:8F:4F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192B3D1FF8A16A9DF339EE0BD3511F7ED99
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bC_mZHSzj5R0OchwmHxTCc1hj08.roa
Signing time: Tue 22 Oct 2024 10:42:17 +0000
ROA not before: Tue 22 Oct 2024 10:42:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.39.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.66.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.112.0/21 maxlen: 24
31.56.120.0/22 maxlen: 24
31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.153.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 06:28:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:d1:ff:8a:16:a9:df:33:9e:e0:bd:35:11:f7:ed:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 22 10:42:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c2fe66474b38f947439c870987c5309cd618f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0b:5b:f3:45:9d:26:e6:b7:ad:75:63:06:ac:
93:38:43:e2:79:c7:96:ca:8c:d8:9c:dd:b3:91:f9:
31:63:f4:31:b7:c3:02:f4:a5:25:6b:27:5d:03:5a:
b7:38:bc:1a:7e:6d:54:d1:38:e5:53:67:20:c7:50:
83:ce:c0:58:1e:36:8c:0c:2d:8f:d2:b3:ec:41:d7:
b1:80:8a:80:3e:3b:cb:98:e8:d3:5a:fb:d4:be:42:
77:d6:78:27:2a:63:36:f6:58:af:f7:bf:b3:a3:1d:
19:df:20:e7:59:dd:15:67:50:b5:eb:76:36:c2:11:
f5:d7:76:83:4b:90:a1:eb:4a:e5:1f:0d:32:ed:ba:
89:71:d1:f0:05:90:53:03:4c:08:d1:85:44:c9:77:
97:16:ed:95:49:c8:07:2d:fe:c5:83:9b:f3:e4:ea:
7d:3f:1b:cb:71:7a:a3:3c:24:72:38:d8:81:ff:e0:
24:37:38:86:96:e8:a9:39:5d:1b:9a:8e:d1:4e:c6:
50:2d:a4:82:42:30:83:b1:fd:3a:03:06:68:fc:f7:
5e:a7:3c:db:41:e8:34:25:1e:bf:23:2d:8a:17:50:
0c:f5:01:3b:3d:b4:5e:0c:16:d5:99:ba:37:f7:b7:
82:1f:ef:56:84:11:dc:89:7c:fb:c2:e6:f7:92:56:
70:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2F:E6:64:74:B3:8F:94:74:39:C8:70:98:7C:53:09:CD:61:8F:4F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bC_mZHSzj5R0OchwmHxTCc1hj08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.39.0/24
31.56.42.0/23
31.56.66.0/24
31.56.85.0/24
31.56.89.0/24
31.56.112.0-31.56.123.255
31.57.0.0-31.57.9.255
31.57.132.0/23
31.57.153.0/24
31.57.176.0/21
Signature Algorithm: sha256WithRSAEncryption
86:e8:2e:40:8b:ad:32:61:dc:36:dd:99:ed:96:71:e9:2a:02:
b0:df:65:c9:8b:5a:fd:c9:32:ea:ed:e1:5f:3f:cf:5c:28:79:
7d:b3:f8:a6:8b:5a:85:41:e1:ff:bc:79:16:71:b5:05:91:15:
d1:c8:14:12:74:2a:38:21:1e:e3:86:8a:d1:1a:98:ea:e2:49:
71:9d:bb:b4:18:f5:b1:35:e8:80:17:99:68:cd:16:c7:92:a1:
c2:fc:d9:c4:56:99:c0:9a:be:71:a7:b1:35:00:02:46:21:95:
a4:61:f9:1a:de:ff:58:80:9f:38:68:18:8d:9d:92:00:08:cb:
57:a5:5e:7b:0e:52:6b:0c:55:0a:de:e6:df:9a:f5:a6:aa:3f:
08:a7:35:88:70:d5:cd:6a:72:a3:e5:ff:a8:af:25:a8:1b:ba:
1d:56:17:75:a7:e8:08:10:87:10:85:4d:ef:d5:9a:58:f1:49:
f5:43:22:3d:49:20:37:3d:76:b3:39:4f:e5:d3:53:fe:df:0e:
e8:d2:8b:d5:c6:b0:7a:61:fc:67:8c:49:b9:b2:ce:a5:2e:e3:
63:5b:31:1f:d1:36:15:e7:2c:8d:43:7a:c7:91:5e:2e:c3:55:
fa:80:5d:83:a1:5c:58:3b:83:cb:61:bd:a7:65:97:6f:be:43:
e9:e3:db:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 10:02:34 2024 by rpki-client on console-ams.rpki-client.org